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Abstract— We describe how a virtual node abstraction layer 
can be used to coordinate the motion of real mobile nodes 
in a region of 2-space. In particular, we consider how nodes 
in a mobile ad hoc network can arrange themselves along a 
predetermined curve in the plane, and can maintain themselves 
in such a configuration in the presence of changes in the 
underlying mobile ad hoc network, specifically, when nodes may 
join or leave the system or may fail. Our strategy is to allow the 
mobile nodes to implement a virtual layer consisting of mobile 
client nodes, stationary Virtual Nodes (VNs) for predetermined 
zones in the plane, and local broadcast communication. The 
VNs coordinate among themselves to distribute the client nodes 
between zones based on the length of the curve through those 
zones, while each VN directs its zone’s local client nodes to move 
themselves to equally spaced locations on the local portion of 
the target curve. 

Index Terms— Motion coordination, virtual nodes, hybrid 
systems, hybrid I/O automata. 


I. INTRODUCTION 


Motion coordination is the general problem of achiev- 
ing some global spatial pattern of movement in a set of 
autonomous agents. An important motivation for studying 
distributed motion coordination, that is, coordination among 
agents with only local communication ability and therefore 
limited knowledge about the state of the entire system, 
stems from the developments in the field of mobile sensor 
networks. Previous work in this area includes different co- 
ordination goals, for example: flocking [9], rendezvous [1], 
[10], [13], deployment [2], pattern formation [15], and ag- 
gregation [7]. Owing to the intrinsic decentralized nature 
of sensor network applications like surveillance, search and 
rescue, monitoring, and exploration, centralized or leader 
based approaches are ruled out. However, the lack of central 
control makes the programming task quite difficult. 

In prior work [3], [5], [6], [4], we have developed a notion 
of “virtual nodes” for mobile ad hoc networks. A virtual 
node is an abstract, relatively well-behaved active node that 
is implemented using less well-behaved real nodes. Virtual 
nodes can be used to solve problems such as providing 
atomic memory [5], geographic routing [3], and point-to- 
point routing [4]. 

In this paper, we explore a framework for using virtual 
nodes to solve motion coordination problems. We consider 
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virtual nodes associated with predetermined, well-distributed 
locations in the plane, communicating among themselves and 
with mobile “client nodes” using local broadcast. Roughly 
speaking, each virtual node is designated a certain zone in the 
plane—disjoint from the zones of the other virtual nodes— 
and is emulated by all the mobile nodes that are present 
in its zone. The VN abstraction makes programming easier 
by providing a centralized controller with reliable storage (a 
virtual node) for each disjoint zone in the plane. 

In this paper we describe a framework for using vir- 
tual nodes to solve a simple motion coordination prob- 
lem, namely, uniformly positioning the mobile nodes on 
a known differentiable curve. The framework can be used 
to implement distributed algorithms for more complicated 
motion coordination problems as well. Using the virtual 
node abstraction for solving a coordination problem reduces 
to achieving coordination among stationary centralized con- 
trollers with a priori known locations. Further, writing the 
coordination algorithm for the virtual nodes amounts to 
“plugging in” control functions in the virtual node programs. 

In addition to describing the framework for using virtual 
nodes to solve coordination problems, we alsobriefly describe 
one way of implementing virtual nodes using the real mobile 
nodes. We use the Hybrid I/O Automata (HIOA) mathemat- 
ical framework [12] for describing the components in our 
systems. 

The paper is organized as follows: Section II describes the 
underlying mobile network. Section III describes our virtual 
node layer. Section IV defines the motion coordination 
problem we consider. Section V describes an algorithm for 
solving this motion coordination problem using the virtual 
node layer. Section VI gives the proofs of correctness of the 
algorithm. Section VII presents simulation results for our 
algorithm. Section VIII outlines one way to implement the 
virtual node layer, and Section IX concludes. 


Il. THE PHYSICAL LAYER 


Our physical model of the system consists of a finite 
but unknown number of communicating physical nodes in 
a bounded square B in R?. We assume that each node has a 
unique identifier from a set Z. Formally, our physical layer 
model consists of three types of HIOA (see Figure 1): (1) 
automata PN; to model physical nodes with identifiers i € 
T, (2) a LBcast automaton that models the local broadcast 
communication service between the physical nodes, and (3) a 


“real world” automaton RW to model the physical locations 
of all the nodes and the real time. 


x;,i € Z, realtime 


RW (real world) LBcast 


x1, realtime 


x;, realtime 


send(m); 
receive(m); 


Fig. 1. The Physical Layer: PN automata communicate with each other 
through an LBcast service and receive time and location information 
continuously from RW. 


Figure 2 shows the required components of each automa- 
ton PN; it may have other internal variables (initially set 
to unique initial values) and actions, which are not specified 
here. PN; continuously receives from RW the current time 
as the input variable realtime and its position as the input 
variable x;, and communicates its velocity to RW through 
the output variable v;. The speed of PN; is bounded by v-. 
The trajectories of the continuous variable v; and the effects 
of the send and receive actions are unspecified. At each 
point PN; is either in active or inactive mode; we assume 
that, initially, finitely many nodes are active. The fail; input 
action sets the mode to inactive and all internal variables 
to their initial values, and the recover; input action sets the 
mode to active. In inactive mode, all internal and output 
actions are disabled, no input action except recover, affects 
the internal or output variables, and during trajectories, the 
locally-controlled variables remain constant and the velocity 
v; remains zero. Thus, we assume that, in inactive mode, 
PN; stops moving. We model the departure of a node from 
B as a failure. For convenience, we assume that transitions 
are instantaneous. 

The PNs communicate using a local broadcast service, 
LBcast, which is a generic local broadcast service param- 
eterized by a radius R, and a maximum message delay 
dp. The LBcast(Rp, dp) service guarantees that when PN; 
performs a send(m), action at some time t, the message 
is delivered within the interval [t,t +d,], by a receive(m) ; 
action, to every PN; that remains in active mode and within 
R, distance of PN; for the entire interval [t,t + dp]. 

The RW automaton (see Figure 3) erves to model realtime 
and locations of all the nodes. It reads the velocity output v; 
from each PN;, i € Z, and computes the position x; from 
the velocity v; for PN; and the LBcast automaton. LBcast 
requires the node position information because it guarantees 
delivery only between “nearby” nodes. RW also produces 


Signature: Transitions: 
Input Input fail; 
receive(m); Effect 
fail; vi —0 
recover; mode < inactive 
Output Other internal variables <— initial 
send(m); 
Input recover; 
Variables: Effect 
Input mode — active 
x; €B 
realtime € R2° 
Output 
vi € R?,|vil < ve 
Internal 


mode € {active, inactive} 
Finite set of other variables, initially set to unique initial values. 


Fig. 2. Hybrid I/O Automaton PN;. 


Variables: 

Input 
v; € R?, for each i € I 

Output 
x; € B, for each 1 € I 
realtime € R29 

Internal 
x; € B, for each 7 € 7, initially arbitrary 
clock € R2°, initially 0 


Trajectories: 

Invariant 
x; € B, for each ic ZT 

Evolve 
x; = X;, for each i € ZT 
d(Xi) = vi, for each i € T 
realtime = clock 
d(clock) = 1 


Fig. 3. RW automaton. 


realtime for all physical layer components. 


III. THE VIRTUAL NODE LAYER 


The bounded square B is partitioned into a finite set of 
zones B;, h € H. For simplicity we assume B is am x m 
square grid, with each grid square corresponding to a zone 
and having sides of length b. Each boundary point of a square 
is unambiguously assigned to one zone. The index set 1 is 
the set of coordinates of the centers of all squares. For each 
Bn, the set Nbrs;, contains the zone identifiers of the north, 
south, east, and west neighboring grid squares. 

Our virtual layer abstraction (see Figure 4) consists of: 
(1) client node automata C'N; with identifiers 7 € Z, (2) 
one stationary virtual node automaton VN», for each h € 
H, located at the center o7, of the square Bp, (3) a virtual 
communication service, VE Bcast = LBcast(Ry, dy), for the 
VNs and the Cs, and (4) an automaton RW to model the 
physical locations of all the C'Ns and the real time. 

A client node automaton CN, i € TZ, is a portion of a 
PN, automaton that has the input variables realtime and 
x; from the RW automaton and an output variable v; to the 


x;,2 € T, realtime 


VLBecast 


RW (real world) 


x1, realtime 


receive(m), 


x;, realtime: 


:send(m), 
‘teceive(m),, 


ae ‘send(m); : : 
‘receive(m); : : 


Fig. 4. Virtual Node Layer: VNs and C’'Ns communicate using the 
V LBcast service. 


RW automaton. With respect to failures, an automaton CN ; 
behaves the same as PN ;. CN; also has send and receive 
actions for interacting with the VL Bcast service. 


A virtual node automaton VN;,, h € H, is an MMT 
automaton [11], [14] parameterized by a time upper bound, 
dy¢mT; it has no realtime clock variable. MMT automata are 
discrete I/O automata that have a “task” structure, which is an 
equivalence relation on the set of locally-controlled actions, 
such that from a point in an execution where a task becomes 
enabled, within at most time djysay7, some action in that 
task must occur. VN}, can experience a fail, input, disabling 
internal and output actions, preventing any inputs other than 
recover; from resulting in state changes, and setting the 
automaton to an initial state. If a recover; occurs at a failed 
VN, the VN actions become enabled with all tasks restarted. 
If VN;, is failed and a C'N is in By, and remains active in 
the zone for d, time, then a recover; occurs within that d,. 
time. VN; communicates with other VNs and CNs using 
the VL Bcast service through send, and receive, actions. 


VL Beast is an LBcast service (as described in the phys- 
ical layer) for the virtual layer, parameterized by radius R, 
and maximum message delay d,, where R, > b. It allows 
VN», to communicate with each VN, such that g € Norsp, 
and with Cs that are located in B;,. It does not allow CN 
automata to communicate with one another. 


The RW automaton in the virtual layer is similar to the 
one in the physical layer, but here it communicates (through 
the realtime and x variables) only with the C'N automata 
and the VLBcast automaton, and not the VN automata. 


This virtual layer will be used in Section V to implement 
a solution to the distributed motion coordination problem. 
Details of how this virtual layer can be implemented using 
the physical layer are in Section VIII. There we further 
discuss the relation between the parameters dy, dr, dy, 
and R,, the physical layer broadcast radius. 


IV. THE MOTION COORDINATION PROBLEM 


A differentiable parameterized curve V is a differentiable 
map P — B, where the domain set P of parameter values is 
an interval in the real line. The curve I is regular if for every 
pé€P, \I'(p)| 4 0. For a,b € P, the arc length of a regular 
curve [' from a to 8, is given by s(T,a,b) = Hi \I’ (p)|dp. 
T is said to be parameterized by arc length if for every 
p © P, |I’(p)| = 1. For a curve parameterized by arc length, 
s(T', a,b) =b—a. 

For a given point x € B, if there exists p € P such that 
I'(p) = x, then we say that the point x is on the curve I; 
abusing the notation, we write this as x € I’. We say that I’ is 
a simple curve provided for every x € I, [~1(x) is unique. 
A sequence xj,...,X» of points in G are said to be evenly 
spaced on a curve I’ if there exists a sequence of parameter 
values py < po... < pn, such that for each 7, 1 <i<n, 
T'(p;) = x,;, and for each?, 1 <i<n,pj—pj_1 = Pit1—Di- 

In this paper we fix I to be a simple, differentiable curve 
that is parameterized by arc length. Let P, = {p € P: 
T'(p) € Bp} be the domain of Tin zone By, C B. The local 
part of the curve [’ in zone By, is the restriction [;, : P, - 
By. We assume that P;, is convex for every zone B;, C B; it 
may be empty for some B;,. We write |P),| for the length of 
the curve I’;,. We define the quantization of a real number 
x with quantization constant 0 > 0 as qo(x) = [£]o. For 
the remainder of the paper we fix o and write q, as an 
abbreviation for go(|P,|). We write gmin for the minimum 
nonzero gp, and Gmax for the maximum qj. 

Our goal is to design an algorithm that runs on the physical 
nodes such that, if there are no failures or recoveries of 
physical nodes after a certain point in time, then: (1) within 
finite time the set of nodes in each zone B;,, h € H, becomes 
fixed, and the size of the set is “approximately” proportional 
to the quantized length qp, (2) within finite time all physical 
nodes in B;, for which q, 4 0 are located on T’;,, and (3) in 
the limit all the nodes in each Bp are evenly spaced on Ip. 


V. SOLUTION USING VIRTUAL NODE LAYER 


The Virtual Node abstraction is used as a means to 
coordinate the movement of client nodes in a zone. A VN 
controls the motion of the C'Ns in its zone by setting and 
broadcasting target waypoints for the CNs: VNp, h © H, 
periodically receives information from clients in its zone, 
exchanges information with its neighbors, and sends out a 
message containing a calculated target point for each client 
node “assigned” to zone B),. Informally, VN, performs two 
tasks when setting the target points: (1) it re-assigns some of 
the C'Ns that are assigned to itself to neighboring VNs, and 
(2) it sends a target position on I’ to each C'N that is assigned 
to itself. The objective of (1) is to prevent neighboring VNs 
from getting depleted of C'Ns and to achieve a distribution of 
CN over the zones that is proportional to the length of [in 
each zone. The objective of (2) is to space the nodes evenly 
on I within each zone. A CN, in turn, receives its current 
position information from RW and its target location from a 
VN, and continuously computes a velocity vector that will 
take it to its latest received target point. 


In our algorithm each virtual node VN}, uses only in- 
formation about the portions of the target curve [' in zone 
By), and the neighboring zones. For convenience, we assume 
that all client nodes know the complete curve ['; we could 
instead model the client nodes in B;, as receiving inputs from 
another automaton about the nature of the curve in zone B;, 
and neighboring zones only. 


A. Client Node Algorithm 


The algorithm for the client node C'N(6);, i € Z, appears 
in Figure 5. The client node follows a round structure, where 
rounds begin at times that are multiples of 6. Recall that 
VN automata do not have access to realtime whereas CN 
automata do. To help VNs follow the round structure, the 
CNs send “trigger” messages to prompt the VNs to perform 
transitions. 

At the beginning of each round, a C'N sends a cn-update 
message to its local VN (that is, the VN in whose zone 
the C'N currently resides). The cn-update message tells the 
local VN the C'N’s id, its current location in 6, and current 
round number. 

The CN then sends an exchange-trigger message d., + € 
later to its local VN. An additional djgyyr + 2d, + € time 
later, the CN sends a target-trigger message to its local 
VN. Both these messages are trigger messages that include 
the CN’s current location and the current round number, 
used by the local VN to determine whether the CN is in its 
zone and what the current round number is. 

CN, processes only one kind of message, target-update 
messages sent by its assigned VN. Each such message 
describes the new target location x; for C'N;, and possibly an 
assignment to a different VN. CN, continuously computes 
its velocity vector v;, based on its current position x; and its 
target position x*, as v; = Uc(x; — x*)/||x; — x7||, moving 
it with maximum velocity towards the target. 


B. Round structure 


The VN;,, h € H, algorithm follows the C'Ns’ round 
structure. However, Vs do not have access to the realtime 
variable and must instead rely on trigger messages from 
CN to determine when enough time has elapsed to perform 
required actions. Here we explain how we implement the 
round structure fora VN. 

Recall that at the beginning of a round, each C'N sends 
a cn-update message to its local VN. The C'Ns then send 
exchange-trigger messages d, + € after the beginning of 
the round, enough time that the cn-update messages have 
already been delivered, signaling to the VN that it has 
received all cn-update messages that were transmitted at 
the beginning of the round in its zone. The VN waits before 
using information from the cn-update messages until it 
receives one of the CNs’ exchange-trigger messages. The 
VN then sends vn-update messages to its neighbors. 

Each C'N sends a target-trigger message to its local 
VN an additional dysyapr + 2d, + € time after it sends an 
exchange-trigger message. This additional time is enough 
for all the following to have happened: (1) each neighboring 


Signature: 

Input 

receive(m);, m € ({target-update} x B) 
Output 

send(m);, m € ({cn-update} x Z x B x N) 

U ({exchange-trigger, target-trigger} x B x N) 

Internal 

init; 


Variables: 

Input 
x; €B 
realtime € R2° 

Output 
vi € R?, velocity vector 

Internal 
x* € BU{L}, target point, initially L 
round, next-exch, next-target € NU {L}, initially L 


Transitions: 
Internal init; 
Precondition 
round = 1 
Effect 
round, next-exch, next-target — [realtime/6| 
x* — x; 


Input receive((target-update, target) ); 
Effect 
if target(i) ~ null then 
x* — target(t) 


Output send((cn-update, i, x;, round)); 
Precondition 

realtime = round - 6 
Effect 

round — round + 1 


Output send((exchange-trigger, x;, next-exch)) ; 
Precondition 

realtime = next-exch -6 + dy + € 
Effect 

next-exch <— next-exch + 1 


Output send((target-trigger, x;, next-target)) ; 
Precondition 

realtime = next-target - 6 + dygurr + 3dy + 2€ 
Effect 

next-target — next-target + 1 


Trajectories: 
Evolve 
if (x; = x* or x* = 1) then v; =0 
else vi = Uc: (x* — x;)/||x* — x|| 
Stop when 
round = L or realtime = round: 6 
or next-exch-6 + dy + € or next-target-6 + dyymr + 3dy 4+ 2€ 


Fig. 5. Client node CN (6); automaton. 
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VN has received an exchange-trigger message from a 
CN in its zone (dy, time), (2) each neighboring VN has 
performed a vn-update transmission to its neighboring VNs, 
including this one (dygyr time), and (3) the neighboring 
VN vn-update messages have arrived (d,, time). When a 
VN first receives a target-trigger message for a particular 
round from any CN in its region, it knows it has received any 
vn-update messages from neighboring VNs for the round. 
The VN then performs some computation and transmits a 
target-update message to C'Ns local to it. 

A target-update message might not be received by a C'N 
until dysmr + 2d, time after the C'N sent the target-trigger 
message. This accounts for: (1) the time it can take for the 
target-trigger message to be received by the VN (d,), (2) 
the time it can take for the VN to perform the target-update 
broadcast (dyywr), and (3) the time for the broadcast to 
be delivered at the C'N (d,). Given the maximum distance 
between a point in one zone and the center of a neighboring 
zone, V2.5b = ,/(3b/2)? + (b/2)2, and a constant speed of 
Ue for each client node, it can take up to v2.50 time for the 
CN to reach its target. Also, after the CN just arrives in the 
zone it was assigned to, up to V10b/3 = /2.5)- 2 distance 
from where it started, it could find that the local VN is failed, 
in which case it could take up to the d, VN-startup time for 
the VN to recover. 

To ensure a round is long enough for a client node to 
send the cn-update, exchange-trigger, and target-trigger 
messages, receive a target-update message, arrive at its new 
assigned target location, and be sure a virtual node is alive in 
its zone before a new round begins, we require that 6 satisfy 
6 > 2dumr + 5dy + 2€+ max(V2.5b/ve, V10b/3v¢ +d,). 


C. VN algorithm 


The algorithm for virtual node VN (e, 1, p2)n, h © H, 
appears in Figure 6, where e € Z* and pi,p2 € (0,1) 
are parameters of the automaton. VN», collects cn-update 
messages sent at the beginning of the round from CNs 
located in its zone, aggregating the location and round 
information from the message in a table, M. When VN; 
first receives an exchange-trigger message for a particular 
round from any CN in its zone, VN, tallies and computes 
from its table 7 the number of client nodes assigned to it 
that it has heard from in the round, and sends this information 
in a vn-update message to all of its neighbors. 

When VH), receives a vn-update message from a neigh- 
boring VN, it stores the C'N population and round number 
information from the message in a table, V. When VNp, 
first receives a target-trigger message for a particular round 
from any CN in its region, VN», uses the information in its 
tables M and V about the number of C's in its zone and its 
neighbors’ zones to calculate how many of the C's assigned 
to itself should be reassigned and to which neighboring VNs. 
This is done through the assign function (see Figure 7) 
which calculates a partial function assign mapping CN 
identifiers to zones that they are assigned to. If the number 
of CNs y(h) assigned to VN;, exceeds the minimum critical 


Signature: 
Input 
receive(m);,, m € ({cn-update} x Z x B x N) 
U ({exchange-trigger, target-trigger} x B x N) 
U ({vn-update} x H x N x N) 
Output 
send(m) p, 


Constants: 
In = {g € Nbrs: qg # 0} 


State variables: 

M:Z—86xN, partial map from C'N ids to current location and 
round number, initially @. Accessors: loc, round. 

V:H—NxN, partial map from VN ids to the number of C'Ns, and 
round number, initially {(g, (0, 0))} for each g € Nors U {h}. 
Accessors: num, round. 

send-buffer, queue of messages, initially @. 

vn-done, target-done € Z, initially 0. 


Derived variables: 
locM = X(i € id(M)). loc(M(i)) 
y = X(g € Nbrs U {h}). num(V(qg)) 


Transitions: 
Input receive((cn-update, id, loc, round))p, 
Effect 
if loc € By, then 
M<—MU {(id, (loc, round)) } 


Input receive ((exchange-trigger, loc, round)) p, 
Effect 
if (loc € By A vn-done # round) then 
for each i € id(M) 
if round(M(i)) 4 round then 
M—M\ {ii M(i))} 
send-buffer — send-buffer U {(vn-update, h, 
vn-done <— round 


M 


, round) } 


Input receive((vn-update, id, n, round))p, 
Effect 
if id € Nors then 
V(id) <— (n, round) 


Input receive((target-trigger, loc, round))p, 
Effect 
if (loc € By, Atarget-done # round) then 
V(h) — (|M|, round) 
for each g € Nbrs 
if round(V(g)) 4 round then 
V(g) — (0, 0) 
let target = calctarget(assign(id(M), y), locM) 
send-buffer — send-buffer U {(target-update, target) } 
target-done — round 


Output send(m);, 
Precondition 

send-buffer # 0) Am = head (send-buffer) 
Effect 

send-buffer — tail(send-buffer) 


Tasks and bounds: 
{send(m)p, 1 bounds [0, dMMT | 


Fig. 6. VN(e,p1,p2)n IOA signature, variables, transitions, and tasks, 
implementing motion coordination algorithm with parameters: safety e, and 
damping 1, p2. 
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Functions: 
function assign(assignedM: 27, y: Nbrs U{h} > N):T—-H = 
assign: I — H, initially {(i, h)} for each i € assignedM 
n: N, initially y(h) 
ra: N, initially 0 
if y(h) > e then 
if gy ~ 0 then 
let lower = {g € In: 2 y(h) > y(g)} 
for each g € lower 
ra — min(|p2 - [24y(h) — y(g)]/2(|lower|+1) |, n — €) 
update assign by reassigning ra nodes from h to g 
nm—n-—ra 
else if In = 0 then 
let lower = {g © Nbrs: 
for each g € lower 
ra — min(|p2 - [y(h) — y(g)]/2(lower|+1) |, n — e) 
update assign by reassigning ra nodes from h to g 
nm—n-—ra 


y(h) > y(g)} 


else 
ra < [(y(h) —e)/linl| 
for each g € In 
update assign by reassigning ra nodes from h to g 
return assign 


function calctarget(assign: IT — H, locM: T > B): I > B= 
seq, indexed list of pairs in P x Z, initially the list, for each i € Z: 
assign(i)= h AlocM(i) € Tp, of (p, i) where p= T;, | (locM(i)), 
sorted by p, then 7 
for each i € TZ : assign(i) A null 
if assign(i) = g #h then 
locM(i) — Og 
else if JocM(i) ¢ T, then 
locM(i) — ges {minxer, {dist(x,locM(i))}} 
else let p =T', ‘(locM (i)), seq(k) = (p, 4) 
ifk= first(seq) then locM(i) — Tp (inf( Px) 
else if k = last(seq) then locM(i) — T',(sup(P,)) 
else let seg(k — 1) = (pp—1,tn-1), seqg(k +1) = 
locM(i) —Tp(p + pi: (Peat EP RED —p)) 
return locM 


(Pk+1>tk41) 


Fig. 7. VN(e,p1,p2)p IOA functions. 


number e, then the assign function reassigns some of the 
CNs to neighbors of VN p. 

Let Imp denote the set of neighboring VNs of VN), that 
are on the curve T' and yp(g), g € Nobrsp U {h}, denote 
the number num(V;(g)) of CNs assigned to VN. If qn Z 
0, meaning VN», is on the curve (lines 7-11), then we let 
lower, denote the subset of Nbrs, that are on the curve and 
have fewer assigned C'Ns than VN), has after normalizing 
with £2. For each g € lowern, VN», reassigns the smaller 
of the following two quantities of CNs to VN,: (1) ra = 
p2° [a2 yn (h) — yn(g)]/2(\lower,| + 1), where po < lisa 
damping factor, and (2) the remaining number of C'Ns over 
e still assigned to VN ;,. 

If gq, = 0, meaning VN ,, is not on the curve, and VN;, has 
no neighbors on the curve (lines 13-17), then we let lower, 
denote the subset of Nbrs;, with fewer assigned C'Ns than 
VN). For each g € lower;,, VN», reassigns the smaller of 
the following two quantities of CNs: (1) ra = po: [yn(h) — 
yn(g)|/2(|\lowerp;| + 1) and (2) the remaining number of 
CNs over e still assigned to VN ;,. 

VN;, is on a boundary if qn, = 0, but there is a g € Nbrsp, 


with gg # 0. In this case, yn(h) — e of VN;,’s CNs are 
assigned equally to neighbors in In; (lines 19-22). 

The client assignments are then used to calculate new 
target points for local CNs through the calctarget function 
(see Figure 7). This function assigns to every CN; assigned 
to VN» a target point locM;,(i) € Bg, g € Nbrsp U {h}, to 
move to. The target point JocM;,(7) is computed as follows: 
If CN; is assigned to VN, g A h, then its target is set 
to the center 0, of B, (lines 30-31); if CN; is assigned to 
VN;, but is not located on the curve I, then its target is 
set to the nearest point on the curve, nondeterministically 
choosing one if there are several (lines 32-33); if CN, is 
either the first or last client node on I), then its target is set 
to the corresponding endpoint of [;, (lines 35-36); if CN; 
is on the curve but is not the first or last client node then 
its target is moved to the mid-point of the locations of the 
preceding and succeeding C'Ns on the curve (line 38). For 
the last two computations a sequence seq of nodes on the 
curve sorted by curve location is used (line 27). 

VN), finally broadcasts the new target waypoints for the 
round through a target-update message to its CNs. 


VI. CORRECTNESS OF ALGORITHM 


We say CN;,7 © Z, is active in round ¢ if its mode is 
active for the duration of round t. A VN pn, h € H, is active 
in round ¢ if there is some active CN; with x; € By), for the 
duration of rounds t — 1 and t. Thus, none of the VNs is 
active in the starting round. We use the following notation: 
In(t) is the set of ids h € H of VNs that are active in round 
t and for which gn, # 0. Out(t) is the set of ids h € H of 
VN that are active in round t and for which q, = 0. C(t) 
is the set of active C'Ns at round t, and C;,,(t) and Cout(t) 
are the sets of active C'Ns located in zones with ids in In(t) 
and Out(t), respectively, at the beginning of round t. 

For any pair of neighboring zones B, and By), and for any 
round t, we use yg(h)(t) to refer to the value of yg(h) at 
the point in time in round ¢t when VN, finishes processing 
the first target-trigger message of round ¢ it receives. For 
any f,g € Nobrs, U {h}, in the absence of failures and 
recoveries of C'Ns in round t, y+ (h)(t) = yg(h)(t); we write 
this simply as y;,(t). We present a sequence of lemmas that 
together establish the following theorem: 


Theorem J: If there are no failures or recoveries of client 
nodes at or after some round to, then within a finite number 
of rounds after to: 

(1) the set of C's assigned to each VN;,, h € H, becomes 
fixed, and the size of the set is proportional to the quantized 
length gq, within a constant additive term went), and 

(2) all client nodes in B, for which q, 4 0": are ‘located on 


I, and evenly spaced on [’;, in the limit. 


For the rest of this section we fix a particular round number 
to and assume that no failures or recoveries of C'Ns occurs 
at or after round to. The first lemma states some basic facts 
about the assign function (see Figure 7): 


Lemma 1: In every round t > to: (1) If ypz(t) > e for 
some h € H, then yp(t + 1) > e, (2) In(t) C In(t + 1), 


(3) Out(t) C Out(t + 1), (4) Cin (t) C Cin (t + 
Cout (t a 1) Cc Cout (t). 

Proof: We fix round ¢t > to. (1) From line 6 of the 
assign function (Figure 7) it is clear that VNV;,, h © H, 
reassigns some of its C'Ns in round t only if yp(t) > e. 

(2) For any VN, h € In(t), if yn(t) < e then VN; 
does assign CNs, and y,(t + 1) = yp(t), otherwise, from 
line 16 of Figure 7 it follows that y,(t + 1) > e. In both 
cases h € In(t +1). 

(3) Same as (2). 

(4) Consider C'N;, i € Cin(t), such that C'N; is assigned 
to VNy, h € In(t). From lines 7-11 of Figure 7 we see 
that CN; is assigned to some VN,, g € Inn U {h}. Since 
In, U{h} C In(t + 1), the result follows. 

(5) As there are no failures and recoveries of CNs, C(t) = 
C(t +1). By definition, Ci, () U Cour(t) = C(t), Cin(t) 
Cout (t) = 0, and Cin (t + 1) U Cout(t + 1) = C(t + 1), 
Cin(t +1) 9 Cout(t + 1) = 0. The result follows from part 
(4). = 


1), and (5) 


The next lemma states a key property of the assign func- 
tion after round to: VN, g € Out(t), is never assigned a 
larger number of C'Ns in round t+ 1 than the largest number 
of C'Ns that were assigned to any of VN,’s neighbors in 
round t. Similarly, VN, g € In(t), never gets a density 
Yet) of CNs CNs in round t + 1 that is greater than the 
highest density of its neighbors in round t. 


Lemma 2: In every round t > to, for g,h € H and h € 
Norsg: (1) If g,h € Out(t), yn(t) = maxsenors, yf (t), 
and y,(t) < yn(t), then yg(t + 1) < yp,(t) — 1, and 

t t a(t 
(2) If g,h € In(t), #2 = maxsentrs, ui, and 4) < 
yn(t) , then wo*)) < unt) AO 

qh 


Proof (1) Fix ah and ie as in the statement of 
the lemma. Since y(t) > y,(t) and g,h € Out(t), 
we see from line 16 of Figure 7 that the number of 
CNs that VN, is assigned from VN» in round ¢ is at 
most p2(yn(t) — yg(t))/2(\lowern (t)| + 1). This is at most 
p2(yn(t) — yg(t))/4, because yn(t) > y(t) implies that 
lower;,(t) > 1. Then, the total number of Cs assigned 
to VN, in round ¢ by all four of its neighbors is at most 
p2(yn(t) — yg(t)). Therefore, y(t+1) < yg(t) + pa(yn(t) — 
Yg(t)) = Oe (1 — p2)yg(t). As p2 < 1, we have 
Yg(t + 1) < yn(t). The result follows from integrality of 
Yg(t + 1) and yp(t). 

(2) As in part 1, fix g,h and t. Here unt) > walt) and 
g,h € In(t). From line 10 of Figure 7, it follows that the 
number of C'Ns that VN, is assigned from VN), in round t 
is at most p2 (42 2 y1,(t) — y,(t))/2(|lower» (| +1). This is at 
most p2( 52 fay, (t t) — Yg(t))/4. Then, the total number of Cs 
assigned to VNg in found t by all four of its neighbors is 


at most p2(s2yn(t) — y,(t)). Therefore, yg(t +1) < (1— 
g : g(t+1 a(t 
men ye ae that is wd) SS pr) a 4 


maleniion shows that if wt) Ly walt) uly, , then unit) - vol) > 
o dg g 


Imax 


The next lemma states that there exists a round T7,,,; that 
is reached within a finite number of rounds after to, such 
that in every round t > T),, the set of C'Ns assigned to 
VN», h € Out(t), does not change. 


Lemma 3: There exists a round 75,4 > to such that in 
any round t > Tyxu2, the set of CNs assigned to VN;,, h € 
Out(t), is unchanged. 

Proof: First, we show that the number of C's assigned 
to VNz, h € Out(t), remains unchanged, that is y,(t+1) = 
yn(t). Let Nout be the total number of h € H such that 
qn = 0. For any k, 1 < k < Nout, we define maz,(t) to 
be the k‘” largest number of CNs that are assigned to any 
VN», h € Out(t), at the beginning of round t > to: 


max{yn(t) :h € Out(t)}, ifk=1 
maz, (t) = ¢ max{yp(t) :h € Out(t) A 
yn(t) < maxp_i(t)}, otherwise. 


Let mazxvns;(t) be the set of VN ids that have max; (t) 
CNs assigned to them. If there exists an 1, 1 <1 < Nout, 
such that Vk € Out(t) : maxi(t) > yp(t), then for all &, 
L<k< Nout, max,(t) = 0 and mazruns;(t) = 0. 

Let E(t) = (\Cout(t)|, maxi (t), |maruns,(t)|,..., 
Maxn,,,.(t),|\maxvney,,,(t)|). Let w be the minimum 
yn(to) for any h € Out(to), and S = {h © Out(to) 
yn(to) = wh}. Observe that if w < e, then Ein = 
(wS|, w,|S|,0,0...,0,0) is a minimum value for E(t), 
otherwise Emin = (e|S|,e,|5|,0,0...,0,0) is a minimum 
value. It suffices to show that for any round t > to, either 
E(t +1) = E(t), that is, ¢ = Tow, or E(t + 1) is less 
than E(t) by some constant amount, meaning there is a 
k,1 < k < Nou, such that for every 1,1 < 1 < k, the 
I*’ component of E(t +1) is equal to the /‘” component of 
E(t), and the k*” component of E(t + 1) is less than the 
k* component of E(t) by at least 1. 

Consider any round ¢ after tg. From Lemma 1 we know 
that |Cour(t + 1)| < |Coue(t)|. If |Cout(t + 1)| < |Coue(t)|, 
then the first component of (t+ 1) is less than that of E(t) 
by at least 1. Otherwise, |Couz(t + 1)| = |Couz(t)|. If for 
every h € Out(t), ra = 0 for all g € lower;,(t) (see line 16 
of Figure 7), then none of the C'Ns in Couz(t) are reassigned 
in round t¢+1, and E(t+1) = E(t). Setting Tou: = t, we are 
done. Otherwise, there exists a nonempty set of VNs with 
ids in Out(t) that reassign some CN to a neighboring VN. 
We select the nonempty set A of such VNs with the highest 
number of assigned CNs. Let A C mazxuns,(t), for some 
k,l<k< Nout. 

For any g € Out(t) with y,(t) < maz,(t), the maximum 
value of y(t) for any h € Nors, such that VN, gets some 
CNs from VN, in round t is at most maz, (t). From Part(1) 
of Lemma 2 it follows that y,(t + 1) < maz,;(t) — 1. 

For any VN;,, h € A, since no VN with y > 
max,(t) assigns any CNs to VNp, yn(t +1) = ya(t) — 
di gélower, (t) "@g(t), where ra, is the number of CNs VN), 
assigns to its neighbor VN, in round ¢. We have shown 
above that for any g € Out(t), if yg(t) < maz,(t) then 
Yg(t +1) < maz; (t) — 1. There are two possible cases: (1) 


if maxvns,(t) = A, then the k*” max decreases, max;,(t+ 
1) < maz,(t) — 1. That is, the (2k + 1)*’ component of 
E decreases by at least 1, and (2) if A C mazvns;,(t), 
then max,(t + 1) = maazz(t) and |maxuns;,(t + 1)| = 
|maxuns;,(t)| — |A]. That is, the (2k + 2)"¢ component 
of EF decreases by at least 1. This implies that there exists 
Tout, Such that the number of C'Ns assigned to each VN a, 
h € Out(t), t > Tout, remains unchanged. 

Now suppose the set of C'Ns assigned to VN;, changes 
in some round t > Touz. Since ypz(t +1) = yp(t) for all 
h € Out(t). Summing, |Cour(t + 1)| = |Coue(t)| and using 
Lemma 1 we get Couz(ft+1) = Cout(t). The only way the set 
of C'Ns assigned to VN;, could change, without changing 
yn and the set Coxz, is if there existed a cyclic sequence of 
VNs with ids in Out(t) in which each VN gives up c > 0 
CNs to its successor VN in the sequence, and receives c 
CNs from its predecessor. However, such a cycle of VNs 
cannot exist because the Jower set imposes a strict partial 
ordering on the VNs. a 


For the rest of the section we fix T+ to be the first round 
after t 9, at which the property stated by Lemma 3 holds. 
Lemma 3 implies that in every round t > Tout, In(t) = 
In(Tout), Out(t) = Out(Tout), Cin(t) = Cin (Tout), 
and Cour(t) = Cout(Tour); we denote these simply as 
In, Out, Cin, and Couz. The next lemma states a property 
similar to that of Lemma 3 for VN;,, h € In, and its proof 
is similar to the proofs of Lemma 3, and uses part (2) of 
Lemma 2. 


Lemma 4: There exists a round Ty4y > Tou~ Such that in 
every round t > T':qp, the set of C'Ns assigned to VNp, 
h € In, is unchanged. 


The following lemma bounds the total number of C'Ns 
located in zones with ids in Out to be O(m?). 


Lemma 5: In every round t > Tout, |Cout(t)| = O(m?). 
Proof: From Lemma 3, the set of CVs assigned to each 
VN», h € Out(t), is unchanged in every round t > Tout. 
This implies that in any round t > Touz, the number of CNs 
assigned by VN», to any of its neighbors is 0. Therefore, 
from line 20 of Figure 7, for any boundary VN 4g, (y(t) — 
e)/|Ing| < 1. Ing is the (constant) set of h € Nbrs, with 
qn # 0. Since |Ing| < 4, y,(t) < 4+. From line 16 
of Figure 7, for any non-boundary VN ,, g € Out(t), that 
is 1-hop away from a boundary VN», Stan <1. 
Since |lower,(t)| < 4, yg(t) < a +4+ e. Inducting on the 
number of hops, the maximum number of C'Ns assigned to 
a VN, g € Out(t), at | hops from the boundary is at most 
at +e+4. Since for any /, 1 < 1 < 2m-—1, there can be at 
most m VWs at I-hop distance from the boundary, summing 
gives |Coutl < (e+ 4)(2m — 1)m + Lm Gm) — O(m’), 
a 
For the rest of the section we fix T’stap to be the first round 
after Tout, at which the property stated by Lemma 4 holds. 


The next lemma states that the number of C'Ns assigned to 
each VN; h € In, in the stable assignment after Ty4ay is 


proportional to q;, within a constant additive term. 


Lemma 6: In every round t > Tstap, for g,h € In(t): 


alles 


Proof: Consider a pair of VNs for neighboring zones 
B, and By, g,h € In. Assume w.Lo.g. yn(t) > yg(t). From 
line 10 of Figure 7, it follows that p2(42yn(t) — Yg(t)) < 


2(|lowern(t)| +1). Since \lowern(t)| < 4, |AO — #9) < 


a S3 me By induction on the number of hops from 1 
3 min 
to 2m — 1 between any two VN, the result follows. a 


From line 33 of Figure 7, it follows immediately that by 
the beginning of round Ty1) +2, all C's in Ci, are located 
on the curve [’. This establishes that the VN algorithm 
satisfies our second goal. The next lemma states that the 
locations of the C'Ns in each zone B;,, h € In, are evenly 
spaced on I’), in the limit. 


Lemma 7: Consider a sequence of rounds ty = 
Tstab,---,tn. AS nm — oo, the locations of CNs in Ba, 
h € In, are evenly spaced on Tp. 


Proof: From Lemma 4 we know that the set of CNs 
assigned to each VN;,, h € In, remains unchanged. Then, 
at the beginning of round ts, every C'N assigned to VN», is 
located in By, and is on the curve [’;,. Assume w.l.o.g. that 
VN», is assigned at least two CNs. Then, at the beginning 
of round ¢3, one CN is positioned at each endpoint of Tp, 
namely at I, (in f(P,)) and [;,(sup(P,,)). From lines 35- 
36 of Figure 7, we see that the target points for these 
endpoint C'Ns are not changed in successive rounds. Let 
seqn(tz2) = (po, 4(0)), +++» (Pn-+15 4(n41))> Where yn =n +2, 
po = inf(Pp), and pn41 = sup(P,). From line 38 of 
Figure 7, for any 7, 1 < i < n, the i? element in Seqh 
at round t,, k > 2, is given by: 


pi-1(tk) + pi41 (te) 


5 - ps(ts)) : 


For the endpoints, p;(tzi1) = pi(tr). Let the i*” evenly 
spaced point on the curve I’, between the two endpoints be 
x;. The parameter value p; corresponding to x; is given by 
Pi = Pot wir (Pn+1 — po). In what follows, we show that as 
n — oo, the p; converge to p; for every 1,0 <7 < n+1, that 
is, the location of the non-endpoint C'Ns are evenly spaced 
on I’,. The rest of this proof is exactly the same as the proof 
of Theorem 3 in [8] in which the authors prove convergence 
of points on a straight line with even spacing. 

Observe that p= 4 (Pi-1+-Di+1) — (1—pi)pi+ 4 pi-1+ 
pi+1). Define error at step k, k > 2, as e(k) = p;(te) — 
p;. Therefore, for each i, 2 < i < n—1, e(k +1) = 
Dilte+1) — Pi = (1 — pies(k) + F(ei-1(k) + e:41(k)), 
e1(k +1) = (1 — pijei(k) + Seo(k), and en(k +1) = 
(1—p1)en(k)+ Gen_1(k). The matrix for this can be written 


pilth41) = pilte) + pr ( 


as: e(& + 1) = Te(k), where T is an n x n matrix: 


pi/2 1—pi pi/2 0 en 0 
0 ma 0 pi/2 1—pi pi/2 


Using symmetry of T’, p; < 1, and some standard theorems 
from control theory, it follows that the largest eigenvalue of 
T is less than 1. This implies limz_...T* = 0, which implies 
limpsoe(k) = 0. | 


VII. SIMULATION RESULTS 


In this section we briefly describe the performance of the 
algorithm as observed in Matlab simulations. In particular 
we study the stabilization time T,,,,, that is, the number of 
rounds required to achieve a stable distribution of PNs over 
zones in 71, for different types of target curves. The inputs 
to the Matlab function that models the assign function of 
our algorithm are: (1) a value of the parameter e of the 
algorithm, and (2) two m x m matrices corresponding to 
the initial and the target distribution of PNs respectively. 
We have performed simulations for different values of m 
and for different target distributions. In all the experiments, 
we fix the value of e to be 5, the number of participating 
PNs to be 10°, and the initial locations of all PNs to be the 
lower right corner of B. 

The bar charts in in Figure 8 show the distribution of 
the PNs (dark bars) at different stages in a typical run of 
the algorithm, and the target distribution (light bars). From 
top to bottom, the charts show the distribution of the PNs 
after the first round, at the end of round T;,,,;, and the stable 
distribution attained at round T'4q,, respectively. 

The plots in Figure 9 show the values of 7), and Ttap 
for values of m ranging from 10 to 20, and for three different 
curves. Cl covers a rectangular region at the lower-right 
comer of 6, C2 covers a rectangular region at the top-left 
comer of 6, and C3 is an annular ring at the center of B. 
From these plots we observe that if the curve is located far 
from the initial position of the PNs, as in the case of C2, 
then the stabilization time Tq, is dominated by Tout. 


VIII. IMPLEMENTING THE VIRTUAL NODE LAYER 


In addition to client CN ;, a physical node PN;,, i € Z, in 
zone B;, runs a TOBcast;,, service anda VNE; 7, h € H, 
algorithm (see Figure 10) to help implement each virtual 
node VNV;, and the VL Bcast service of the virtual layer. 

In this section we present a sketch of our implementation 
of the virtual layer by the physical layer. Our implementation 
is an adaptation of techniques from [4] to emulate a virtual 
mobile node. The only substantive changes made in our 
current implementation are: (1) the changing of virtual node 
locations to be stationary, (2) the replacement of a periodic 
location update with a continuous real-time location update, 
and (3) the restart of a virtual node as soon as a physical 
node discovers it is in a failed virtual node’s zone. The 
virtual nodes we implement here are also modeled differently 
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Fig. 8. Simulation results show the actual (dark) and target (light) 
distribution of PNs over H, at the end of various rounds: the first round 
(top), at Tout (middle), and at T54_4 (bottom). 
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Fig. 9. Plot of Tout and T5+ay for three different kinds of curves with 
varying length m of each side of the bounded plane B. Cl covers a 
rectangular region at the lower-right corner of B, C2 covers a rectangular 
region at the top-left corner of 6, and C3 is an annular ring at the center 
of B. 


— 


x;,7 € ZT, realtime 


x;, realtime send(m); 


receive(m); 


send(m);i 
receive(1ma)i 


xi, realtime, 


RW (real world) LBeast 


TOBcast ig 


xi, realtime 


>| : | | 
8 | 


a 
Fe} 
VE, 


ral send(m); | 


receive(m); 


X 4 


VNEin 


Fig. 10. PN,’s subautomata: A physical node runs several programs, 
including VNE and TOBcast automata as well as a C'N automaton. 


from those in [4], as MMT automata, rather than simple I/O 
automata. 

We use a standard replicated state machine approach to 
implement robust virtual nodes that takes advantage of a 
TOBcast service to ensure that all VNEs in a zone receive 
the same messages in the same order. Using the LBcast 
service of the physical nodes and common knowledge about 
realtime, the totally ordered broadcast service TOBcast 
for a zone can be implemented as follows: At the time of 
sending, a message is tagged with the sender’s identifier, 
zone id, a sequence number, and a timestamp, which is the 
current value of realtime. The tags define a total order on 
sent messages, used in delivery. Before delivering a message 


TOBcast;,, waits until d, + € time has elapsed since it 
was sent, ensuring that earlier messages were received. It 
then delivers the messages for the timestamp in order of 
sender id and sequence number. (As a technical detail, we 
actually order all join-req messages (described shortly) after 
any other messages for a particular time.) TOBcast;,p, only 
processes messages tagged for zone Bp. 

Each VNE;,;, independently maintains the state of VN;, 
and simulates performing actions of the VN on that state. In 
order to keep the state replication consistent across different 
VNEs running on different physical nodes in the same 
zone, when VN, wants to simulate an action of the VN 
(such as that of receiving a message at the VN that was 
actually received by VNE;,), it broadcasts a suggestion to 
perform the action to the other VVEs of the zone using the 
TOBcast service. When an action suggestion is received by 
VNE;, p, it is saved in a pending-action queue. Actions are 
removed from a pending-action queue in order by VNE;,», 
and simulated on VNE;;,’s local version of the VN state. 
A completed action is then moved into a completed-action 
queue, referenced by VNE;;, to prevent reprocessing of 
completed actions. 

When a VINE enters a zone, it executes a join protocol to 
get the zone’s VN state. The join protocol begins by using 
TOBcast to send a join-req message. Whenever a VNE 
receives its own join-req message, it starts saving messages 
to process in its pending-action queue. If a VNE that has 
already joined receives the join-req, it uses TOBcast to send 
a join-ack containing a copy of its version of the VN state. 
When the joining VNE receives the join-ack, it copies the 
included VN state and starts processing the actions in its 
pending-action queue. If a VNE’s join-req is not answered 
in 3d, + 3e time, indicating the VN is failed, the VNE will 
reset the VN e« time later by using TOBcast to send a reset 
message. When a VINE receives a reset message, it sets the 
VN state to its initial state, clears the pending-action queue, 
and starts simulating the VN. 


Theorem 2: Assuming R, > 5b, the TOBcast;,n, 
VNEin, t € LT,h © H, and trivial client implementation 
correctly implement the Virtual Node abstraction with VN 
task upper time bound dyyirr = 2d,y + 2€, VN-startup time 
dy = 4d, + 5e, VEBcast broadcast radius R, > 6, and 
VLBcast maximum message delay d, = 2d, + €. 

Proof: The correctness of the implementation of the 
Virtual Node layer largely follows from the proof of cor- 
rectness for the implementation of the VMN layer in [4]. 
We here discuss the correctness of the implementation with 
respect to: (1) the task upper bound, (2) the VN-startup time, 
and (3) the requirements for LBcast and VLBcast. 

(1) Once one of an abstract VN;,’s output or internal tran- 
sitions is enabled, the precondition for sending a suggestion 
to simulate the action through TOBcast is satisfied at all 
VNE;» for PN; in Bp, and the broadcast occurs. It takes 
at most d, + time for the message to be delivered at other 
VNE;,, for PN; in Bp, after which the action is simulated. 
However, it is possible for all active VN Es to fail right after 


sending a join-ack to a new VINE and before proposing 
an enabled action, leaving the new VNE to broadcast the 
simulation proposal d, + later, when it receives the join-ack. 
Given that PN transitions are assumed to be instantaneous, 
duur —_ 2dp + 2e. 

(2) If PN; enters a zone Ba, with a failed VN, its 
VNE;,,’s join-req will not be answered in 3d, + 3e time, 
and the VNE will send a reset message an additional € later. 
It takes the VNE' at most d, + € time to receive the reset 
message and restart the VN. The total time 4d, + 5e for a 
joining node to succeed in restarting a VN is d,. 

(3) As in [4], d, = 2d, + € since the underlying LBcast 
service used to implement VLBcast takes up to d, time 
to deliver a transmitted message from a VN or CN, after 
which TOBcast takes an additional d,+€ time to redeliver a 
message at a receiving VN. Also similarly to [4], we require 
that R, > /50, in order to guarantee that R, > b, allowing 
a CN, in B,, i € Z,h © H, and VN;, to communicate, and 
a VN;, (located at o;7,) and each of its neighboring zones’ 
VNg, 9g € Nors(h), (located at o,) to communicate. This is 
because a VNE emulating a zone B), can be as far away as 
,/ (2b)? + b? from a VNE emulating the VN of neighboring 
zone B,. To guarantee the two can communicate while 
emulating their respective VNs, the broadcast radius R, of 
the physical L.Bcast service must be be at least /5b. Unlike 
[4], however, we do not require an additional tolerance factor 
to account for periodic location updates from the RW; here, 
the RW automaton is assumed to continually update the 
VNE of its current location. a 


IX. FUTURE WORK AND EXTENSIONS 


We believe the framework introduced in this paper can 
be useful in simplifying the coordination of mobile nodes 
to solve a variety of other, more complex, problems. One 
promising avenue of future work would be to employ our 
framework for some of those problems. As one example, in 
the control algorithm presented in this paper, each virtual 
node VN uses only local information about the target curve 
I’. This use of only local information should adapt well to a 
problem extension where the curve is dynamically changing. 
The curve (or point, even) could be moving targets being 
tracked. In this case, the framework for coordination of nodes 
we present here is useful for two reasons: (1) maintaining 
alive VNs to detect targets and (2) guiding physical nodes 
to the moving targets. 

Also of interest is an in-depth analysis of the stability 
of the control algorithm employed in this paper in the 
face of some regular rate of physical node addition and 
removal. While there has been a paucity of work in this 
area, such analyses are extremely important in the evaluation 
of solutions to most any control algorithms for dynamic 
systems. 
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APPENDIX 


Signature: 
Input 
receive(m);,,, m a client message 
TOBcast-rev(m);,n, m a TOBcast message 
Output 
send(m); n,m a client message 
TOBcast(m);,, m a TOBcast message 
Internal 
zone-update; », 
join; nz 
restart; p, 
init-action(act); ,, act € VNp.sig \ inputs 
simulate-action(act); ;,, act € VNp.sig 
ack-join;, 7, 


Variables: 

Input 
x, € B, current location of mobile node 
realtime € R2° 

Internal 
status € {joining, listening, active}, initially active 
he HU{L}, zone id, initially L 
val € VNy.states, state of VN jp, initially V N;,.start 
pending-join, max id of pending join reqs, initially 0 
completed -join, max id of answered join reqs, initially 0 
join-id, time of join-req, initially 0 
pending -actions, queue of V Nj,.actions to be simulated, initially 0 
completed-actions, queue of V Np.actions simulated, initially 0 
TOBcast-out, queue of outgoing TO Bcast msgs, initially 0 
local-out, queue of outgoing client messages, initially 0 


Trajectories: 


Stop when any Precondition is satisfied 


Fig. 11. Signature, variables, trajectories of VNE; , algorithm imple- 
menting VN py. 


Input receive(m);,n, 
Effect 
TOBcast-out — TOBcast-out U { (simulate, (receive, m), L)} 


Output send(m);,7, 
Precondition 

local-out #  \m = head (local-out) 
Effect 

local-out — tail (local-out) 


Internal init-action(act) ; 7, 


Precondition 
status = active \ x € Bp, Ad(val, act) A L 
Effect 


TOBcast-out — TOBcast-out U { (simulate, act, (realtime, i))} 


Internal join; 7, 


Precondition 
status = idle \x € By 
Effect 


status <— joining 
join-id — realtime 
TOBcast-out — TOBcast-out U {(join-req, L, join-id)} 


Internal restart; », 
Precondition 

status = listening Ax € By, A realtime = join-id + 3dp + 4e 
Effect 

TOBcast-out — TOBcast-out U {(reset)} 


Internal zone-update; 7, 
Precondition 
x ¢ B h 
Effect 
status <— idle 
h < id of zone h’ such that x € Byy 
val — VNp.start 
pending -actions — @ 


Internal simulate-action(act); 
Precondition 


status = active \x € By, Ahead(pending-actions) = (simulate, act, oid) 


Effect 
dequeue (pending -actions) 
if ((simulate, act, oid) ¢ completed-actions / 5(val, act) # ) then 
val — 6(val, act) 
if act = (send, m) then 
local-out — local-out U {m} 
completed-actions — completed-actions U {(simulate, act, oid) } 


Internal ack-join; ), 
Precondition 
status = active \x € Bp, A pending-join > completed-join 
pending -actions = ) \ act € VNy.sig \ inputs: 6(val, act)= L 
Effect 


TOBcast-out — TOBcast-out U { (join-ack, (val, completed-actions), pending -join) } 


completed-join — pending-join 


Input TOBcast-rev((optype, param, oid));,p 
Effect 
if optype = simulate then 
if status = listening or active then 
enqueue(pending-actions, (simulate, param, oid) ) 
if optype = join-req then 
pending -join — max(pending -join, oid) 
if (status = joining \ oid = join-id) then 
status — listening 
if optype = join-ack then 
completed-join — max(completed-join, oid) 
if (status = listening and oid > join-id) then 
status — active 
(val, completed-actions) — param 
if optype = reset then 
status —— active 
pending -actions — @ 


Output TOBcast(m); 7, 
Precondition 

TOBcast-out # 0 \m = head(TOBcast-out) 
Effect 

TOBcast-out — tail(TOBcast-out) 


Fig. 12. Transitions of VNE;,, algorithm. 


